Only 1.7% of Chile’s 915 critical-infrastructure operators publish a verifiable vulnerability-disclosure channel. We cover the ground that Big Four audits and pentests structurally miss — aligned with ISO/IEC 29147.
Three capabilities integrated into a single practice.
Continuous research that measures the exposure of regulated critical infrastructure across LATAM at scale. AI-native advisory means senior advisor judgment is encoded into the practice, not bottlenecked behind one founder’s calendar.
Every engagement receives consistent rigor, not partial availability. A multi-agent architecture orchestrates research, writing, analysis and coordination — sustained output of uniform quality regardless of volume.
When research surfaces a significant finding, we coordinate with the affected vendor and, where applicable, with ANCI / the National CSIRT. Aligned with ISO/IEC 29147 and under the contractual framework enabled by Law 21.459 (Chile).
The Coverage Gap Assessment is the entry point to every advisory relationship with Reizan.
Request Coverage Gap AssessmentCoordinated Disclosure Policy
Coordinated vulnerability disclosure policy for production systems. Defines response windows, severity criteria, the ANCI notification process, and conditions for public disclosure. Aligned with ISO 29147 · ISO 30111 · the DOJ 2017 Framework.
The protocol governs how every vulnerability report that reaches Reizan is received, validated and coordinated — with a 90-day window and regulator notification where applicable.
Figures measured over Chile’s regulated universe, published in an academic record with a permanent DOI and re-measured every 90 days.
1.7%
of critical operators publish a verifiable disclosure channel.
16 of 915 operators · the remaining 98.3% has nowhere to receive the report.
915
operators of vital importance designated by the State.
Exempt Resolution No. 87 · Official Gazette 16-Dec-2025.
84%
have their email authentication misconfigured.
766 operators with deficient SPF/DKIM/DMARC: their email can be spoofed.
Inaugural measurement 4-Jun-2026 · 90-day cadence · next cut 2-Sep-2026.
Alignment with these frameworks does not imply formal certification. Reizan adopts them as public methodological references, adapted to the applicable Chilean legal framework.
Reizan is an independent cybersecurity advisory practice for regulated critical infrastructure across Latin America. We pair continuous, at-scale research with regulator-aware advisory, covering ground that traditional Big Four audits and pentests structurally miss.
Our AI-native architecture orchestrates research, analysis, writing and coordination. It is an execution capability — built to deliver consistent rigor regardless of volume — not a marketing layer over a traditional consultancy. It already operates with an active client.
Reizan operates through AlmaAI SpA, a current Chilean legal entity. Our independence is structural: we do not resell vendor products or broker licenses. The moat is regulatory independence and methodological rigor.
Operators of vital importance and regulated companies that need to close their coverage gap under the Law 21.663 framework.
View the routePublic sectorANCI, the CSIRT and institutional bodies that need an aggregate reading of the gap — no operators named.
View the routeInvestmentInvestors and institutional allies evaluating the practice: published research and a verifiable method.
View the routeCommunitySecurity researchers: coordinated disclosure aligned with ISO/IEC 29147 and public recognition.
View the routeA 4–6 week diagnostic sprint: executive report, coverage dashboard and prioritized roadmap. Response within 48 business hours.
Request Coverage Gap Assessment